Product
9 published CVES affecting debian/iwd, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).
Newest publication first
A flaw was found in iwd. Due to an improper comparison where the mobility domain check compares an element to itself rather than against the incoming frame, validation always succeeds. A network-adjacent attacker can exploit this issue by sending a crafted 802.11r Fast BSS Transi...
A flaw was found in iwd. This vulnerability allows an unauthenticated, adjacent attacker to potentially execute arbitrary code or trigger a Denial of Service (DoS) by crashing the wireless daemon. When generating Radio Resource Management (RRM) beacon reports, iwd copies cached n...
A flaw was found in iwd. An unauthenticated adjacent attacker can transmit a specially crafted Wi-Fi beacon frame containing a malformed High Efficiency (HE) Capabilities element. Due to an incorrect byte offset check during frame validation, length verification succeeds and trig...
p2putil.c in iNet wireless daemon (IWD) through 2.15 allows attackers to cause a denial of service (daemon crash) or possibly have unspecified other impact because of initialization issues in situations where parsing of advertised service information fails.
The Access Point functionality in eapol_auth_key_handle in eapol.c in iNet wireless daemon (IWD) before 2.14 allows attackers to gain unauthorized access to a protected Wi-Fi network. An attacker can complete the EAPOL handshake by skipping Msg2/4 and instead sending Msg4/4 with...
Improper buffer restrictions in the Intel(R) Wireless for Open Source before version 1.5 may allow an unauthenticated user to potentially enable denial of service via adjacent access.
eapol.c in iNet wireless daemon (IWD) through 1.8 allows attackers to trigger a PTK reinstallation by retransmitting EAPOL Msg4/4.
Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.